Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a381323b-73af-38db-a69b-03642ca6bbad.roa
File:                     a381323b-73af-38db-a69b-03642ca6bbad.roa (raw, json)
Hash identifier:          Z7EyoHm3e7bWRqJ8K2nyLufQHLoe53B1F1An+dXfseI=
Subject key identifier:   D0:4A:D9:1B:35:51:3B:F2:A4:77:DB:83:DD:AD:E7:80:D4:13:0A:43
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E07009AD959120E3EB6DD2480
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a381323b-73af-38db-a69b-03642ca6bbad.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     396982
IP address blocks:        165.85.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9a:d9:59:12:0e:3e:b6:dd:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=028c4e4b-426b-46bc-98e1-f6cb85a2cc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a6:0f:cf:5c:4a:44:32:48:0c:0e:08:62:64:
                    0b:0e:12:16:28:e0:15:a0:28:04:6a:a9:dd:40:ca:
                    f8:9d:c1:a6:e6:0c:f5:53:45:67:ff:8f:c9:9e:35:
                    e8:59:e5:d2:b7:ee:d1:e4:a8:77:98:1f:3d:99:2b:
                    c8:92:ba:8d:78:aa:a7:d5:9b:85:86:ec:99:da:69:
                    dd:08:62:f6:ee:64:df:c4:e4:71:10:f4:6a:c4:b3:
                    46:d2:55:07:15:23:38:01:06:85:ae:52:89:64:97:
                    c0:7a:f3:09:36:02:e5:8c:d0:9f:2a:da:06:78:f1:
                    f6:7c:74:7e:43:9b:19:cb:8b:5e:ce:17:0c:29:5e:
                    52:f6:2f:20:90:88:5d:61:d4:b4:99:6a:8e:32:17:
                    f4:76:c8:28:09:ee:8d:7c:a5:ba:8f:be:c4:3a:5d:
                    32:03:ff:bf:90:c9:1c:a9:4c:b0:37:ab:9e:20:71:
                    94:66:1a:e7:dd:66:14:4c:38:33:bc:37:61:56:67:
                    16:25:86:51:2f:7e:e7:c7:e5:69:a8:09:2c:0d:1a:
                    d7:17:89:7a:5e:e3:32:77:a3:fc:82:8d:3d:f7:2e:
                    d5:f8:36:3e:02:28:c0:43:ed:22:b2:1a:77:dd:79:
                    26:4e:07:a0:0f:a6:ef:a9:01:1e:de:fd:1e:66:53:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4A:D9:1B:35:51:3B:F2:A4:77:DB:83:DD:AD:E7:80:D4:13:0A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a381323b-73af-38db-a69b-03642ca6bbad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4f:f8:11:fe:02:26:19:bb:63:c9:2d:a9:99:fb:b5:bb:5c:
         1c:99:ad:59:a4:64:63:02:f1:e4:ba:df:f1:20:84:4d:a4:c3:
         d9:fd:7b:a5:5f:5a:e0:95:ed:18:7d:bd:94:0f:c4:32:5a:1b:
         72:7a:e1:81:9b:f4:e5:53:1b:bc:96:4e:11:43:61:17:b4:14:
         42:f4:d4:f1:9c:3f:8d:42:e3:6f:37:7b:e6:0a:c2:9c:b7:82:
         8d:70:1f:a8:c9:4e:21:eb:d5:fd:46:a5:7b:0c:2f:d6:60:dd:
         64:ac:b2:f3:d6:20:40:18:22:62:28:65:8f:8a:49:3e:5c:fb:
         df:4c:ba:07:bd:d8:fa:9b:04:39:9e:eb:2e:a0:d1:e2:59:44:
         f3:3e:87:19:11:36:0d:ae:6b:4d:2f:bf:90:ea:09:5c:da:99:
         90:2b:35:dd:9d:2e:7a:20:72:42:f6:47:d6:b1:ee:34:c4:8a:
         a1:01:bf:c1:40:21:e7:29:5c:02:de:e8:67:df:41:2a:93:4c:
         6a:ce:04:06:4a:de:d8:2c:00:9b:20:36:7f:af:46:c6:08:b0:
         46:12:60:ec:dd:56:2a:bc:30:c5:d7:41:64:68:e0:37:42:69:
         28:e0:34:65:52:5d:d5:f7:a4:42:06:38:7d:41:54:44:5c:57:
         f2:c9:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:30:27 2026 by rpki-client